Abstract: Techniques for providing localization at scale for a cloud-based security service are disclosed. In some embodiments, a system/method/computer program product for providing localization at scale for a cloud-based security service includes receiving a connection request at a network gateway of a cloud-based security service; performing a source Network Address Translation (NAT) from a registered set of public IP addresses associated with a tenant; and providing secure access to a Software as a Service (SaaS) using the cloud-based security service.

Abstract: Techniques for providing localization at scale for a cloud-based security service are disclosed. In some embodiments, a system/method/computer program product for providing localization at scale for a cloud-based security service includes receiving a connection request at a network gateway of a cloud-based security service; performing a source Network Address Translation (NAT) from a registered set of public IP addresses associated with a tenant; and providing secure access to a Software as a Service (SaaS) using the cloud-based security service.

Abstract: A system and method for managing network traffic is disclosed. The method includes determining an application domain, network elements associated with the application domain, and roles the network elements in the application domain. A virtual routing and forwarding (VRF) policy is generated for each of the network elements in the application domain based on the application domain and the role of each of the network elements in the application domain.

Abstract: Techniques for providing localization at scale for a cloud-based security service are disclosed. In some embodiments, a system/method/computer program product for providing localization at scale for a cloud-based security service includes receiving a connection request at a network gateway of a cloud-based security service; performing a source Network Address Translation (NAT) from a registered set of public IP addresses associated with a tenant; and providing secure access to a Software as a Service (SaaS) using the cloud-based security service.

Abstract: Techniques for providing localization at scale for a cloud-based security service are disclosed. In some embodiments, a system/method/computer program product for providing localization at scale for a cloud-based security service includes receiving a connection request at a network gateway of a cloud-based security service; performing a source Network Address Translation (NAT) from a registered set of public IP addresses associated with a tenant; and providing secure access to a Software as a Service (SaaS) using the cloud-based security service.

Abstract: Techniques for providing localization at scale for a cloud-based security service are disclosed. In some embodiments, a system/method/computer program product for providing localization at scale for a cloud-based security service includes receiving a connection request at a network gateway of a cloud-based security service; performing a source Network Address Translation (NAT) from a registered set of public IP addresses associated with a tenant; and providing secure access to a Software as a Service (SaaS) using the cloud-based security service.

Abstract: In general, embodiments relate to a method for processing packets in a network. The method includes receiving, by a first network element, a route comprising a first loopback address (LBA) associated with a second network element, and a loopback network layer reachability information (loopback NLRI) specifying the LBA and a plurality of interfaces on the second network element associated with the LBA. The method further includes receiving, by the first network element, a packet, making a first determination that the LBA is a next hop for the packet, based on the first determination, selecting a first interface of the plurality of interfaces, transmitting the packet towards the first interface.

Abstract: In general, embodiments of the invention relate to a system and method for configuring and managing a network. More specifically, embodiments of the invention relate to segregating traffic in a network based on application domains. Further, embodiments of the invention provide a mechanism to efficiently implement traffic segregation in a network using application domain specific virtual routing and forwarding (VRF) tables.

Abstract: In general, embodiments of the invention relate to a system and method for configuring and managing a network. More specifically, embodiments of the invention relate to segregating traffic in a network based on application domains. Further, embodiments of the invention provide a mechanism to efficiently implement traffic segregation in a network using application domain specific virtual routing and forwarding (VRF) tables.

Abstract: In general, embodiments relate to a method for processing packets in a network. The method includes receiving, by a first network element, a route comprising a first loopback address (LBA) associated with a second network element, and a loopback network layer reachability information (loopback NLRI) specifying the LBA and a plurality of interfaces on the second network element associated with the LBA. The method further includes receiving, by the first network element, a packet, making a first determination that the LBA is a next hop for the packet, based on the first determination, selecting a first interface of the plurality of interfaces, transmitting the packet towards the first interface.

Abstract: In general, embodiments of the invention relate to a system and method for configuring and managing a network. More specifically, embodiments of the invention relate to segregating traffic in a network based on application domains. Further, embodiments of the invention provide a mechanism to efficiently implement traffic segregation in a network using application domain specific virtual routing and forwarding (VRF) tables.

Abstract: A method for handling user input loss from a client device to a remote server using user datagram protocol (UDP), includes receiving a newly generated user input command at the client device, removing a previously generated user input command located at a front of the ring buffer from the ring buffer, shifting one or more other previously generated user input commands towards the front of the ring buffer, placing the newly generated user input command at an end of a ring buffer, and sending a first ring buffer message containing the one or more other previously generated input commands and the newly generated user input command to the remote server.

Abstract: A method for handling user input loss from a client device to a remote server using user datagram protocol (UDP), includes receiving a newly generated user input command at the client device, removing a previously generated user input command located at a front of the ring buffer from the ring buffer, shifting one or more other previously generated user input commands towards the front of the ring buffer, placing the newly generated user input command at an end of a ring buffer, and sending a first ring buffer message containing the one or more other previously generated input commands and the newly generated user input command to the remote server.

Abstract: A first forwarding instance is provided that includes a first set of routes. A second forwarding instance is provided that includes a second set of routes comprising a subset of the first set of routes. The first routing instance and the second routing instance are associated with a same virtual private routed network (VPRN).

Abstract: A lockless processor core communication capability is provided herein. The lockless communication capability enables lockless communication between cores of a multi-core processor. Lockless communication between a first core and a second core of a multi-core processor is provided using a message queuing mechanism. The message queuing mechanism includes a message queue, a first bitmap, and a second bitmap. The message queue includes a plurality of messages configured for storing data queued by the first core for processing by the second core. The first bitmap includes a plurality of bit positions associated with respective messages of the message queue, and is configured for use by the first core to indicate availability of respective queued message data.

Abstract: A technique is disclosed for detecting a memory leak. A request to allocate or deallocate memory is received. In a memory leak table that is bounded in size, an entry that is associated with a call path with which the request is associated is accessed. The entry in the memory leak table is updated.

Abstract: Disabling mutually recursive routes is disclosed. An event that results in a routing table update is received. A next hop table is updated to reflect the event. It is determined whether the event is associated with an exterior protocol route. The next hop table is used to perform a recursion check if it is determined that the event is associated with an exterior protocol route.

Abstract: A first forwarding instance is provided that includes a first set of routes. A second forwarding instance is provided that includes a second set of routes comprising a subset of the first set of routes. The first routing instance and the second routing instance are associated with a same virtual private routed network (VPRN).

Abstract: A technique is disclosed for detecting a memory leak. A request to allocate or deallocate memory is received. In a memory leak table that is bounded in size, an entry that is associated with a call path with which the request is associated is accessed. The entry in the memory leak table is updated.

Abstract: A technique is disclosed for detecting a memory leak. A request to allocate or deallocate memory is received. In a memory leak table that is bounded in size, an entry that is associated with a call path with which the request is associated is accessed. The entry in the memory leak table is updated. The entry is accessed and a value stored in the entry is read. It is determined if the value indicates that a memory leak may be present.